Privacy Policy

At Woofy ("Woofy", "we", "us", "our", "the App", "the Platform"), we are committed to protecting your personal information and your right to privacy. This Privacy Policy outlines how we collect, process and manage personal data when you use the Woofy application and related services.

We aim to handle your personal information in a lawful, fair and transparent manner in accordance with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and EU General Data Protection Regulation ("EU GDPR").

By using the App, you acknowledge that you have read and understood this Privacy Policy. If you have any questions or concerns, please contact us directly at hello@getwoofy.app.

1. Data Controller

The data controller responsible for your personal data is:

• Registered Company Name: TECHDENHQ LTD trading as Woofy
• Registered Business Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
• Jurisdiction: England & Wales
• Contact Address: hello@getwoofy.app

2. What Data We Collect

We are committed to collecting only the personal data that is necessary, relevant and adequate for the purposes of providing and improving our service. We do not collect personal data beyond what is required for those purposes, and we regularly review what we hold to ensure it remains proportionate.

2.1 Account profile and identity data

• Email address, name, password (hashed) for user sign-up and account creation.
• Login provider information (e.g. Google / Apple) for user account creation and/or authentication.
• SMS / phone number, for user sign-up, authentication and/or account recovery. Not displayed to other users or shared with third parties.
• Human dog owner profile, including name, display name, gender, email address, mobile number, date of birth, photo, bio, age range, location, photographs, login information for connected social media accounts (e.g. Meta – Instagram / Facebook), preferences on meeting style, sociability and travel distance.
• Information about your dog, including name, date of birth, breed, age, sex, neuter status, weight, photos, personality traits, energy level, play style, vaccination status, derived from a short questionnaire.
• Business users can provide a business name, business type (vet / trainer / walker / brand), contact details, and any relevant verification information.

2.2 Usage and device data

• App usage information (e.g. features used, session times, navigation flows).
• Device information (e.g. device model, OS version, unique device identifiers).
• Approximate location (e.g. language / country from store settings), where permitted by your device settings.
• Log data, such as IP address, browser type, timestamps, error or crash reports, performance diagnostics used to fix bugs (anonymised where possible).

2.3 Location data

• Approximate GPS location information includes the radius of your device coordinates (longitude / latitude) and WiFi access points, for playdate matching, spot discovery, walk-route tracking.
• Precise GPS location is only active once you have given explicit permission, and includes use of the map feature, walk-route tracking, or confirming a spot / playdate location (session-scoped).
• Your location is never tracked in the background without explicit consent. You can select the level of consent ("While Using / Always / Never") in your device / app settings.

2.4 Activity and health data

• Walk logs, feeding logs, weight, medications, vet visits, and other manual entries you choose to record about your dog.
• Activity streaks, points balance, and engagement history.
• Apple Watch / Apple HealthKit data as the human owner (steps, distance, activity) — if you connect the integration.
• To access these features in the Woofy app, you must give explicit consent for health and activity-related data to be processed in your device / in-app settings.

2.5 Photo information

• We only collect and process data relating to the photos you explicitly select or upload. Profile photos are visible to other users on the Woofy platform.
• You can choose the degree of access Woofy has to your photo library ("Full Access / Selected Access / No Access") in your device / app settings.
• We collect data about your profile photos to arrange them in a way that is favourable to you. You can opt out of this feature through our app settings at any time.

2.6 Social media and communications data

• User-generated content including photos, text, posts, videos, reactions, ratings, reviews and comments you self-publish.
• Direct messages you send to other users through in-app messaging.
• Pack memberships and event RSVPs.
• Messages, enquiries or feedback you send to us (for example via email, in-app contact or support forms).
• Marketing preferences, where you opt in to receive news or offers from us.

2.7 Subscription and billing data

• Subscription plan type, status and renewal information.
• Purchase history (product IDs, dates, status) as reported by the App Stores.
• We do not receive or store your full payment card details used for Apple or Google in-app purchases.

2.8 Inferred data

• Match suggestions based on the information you provide about your dog's profile and personality traits.
• Feed personalisation based on user-app engagement signals.

2.9 Data we do not collect

• Government issued identification.
• Financial or payment card data (payments are handled entirely by our third party payment processor).
• The full scope of special category personal data as defined under UK GDPR Art. 9.
• Data revealing criminal convictions or offences (Art. 10).
• Data relating to children under 18.

3. How We Collect Your Data

3.1 Directly from you: When you use the App to create an account, update your profile, generate content, contact us for support or opt in to marketing communications.

3.2 Automatically: When you use the App, we may automatically collect usage and device data through technologies such as log files and analytics tools.

3.3 From third parties: We may receive information from third party-services including authentication providers, app stores, payment processors, subscription management providers, cloud service providers, and market data providers.

4. Legal Bases for Processing

4.1 Performance of a contract (Art. 6(1)(b)): to create and maintain your account, provide access to the App and its features, and manage your subscription.

4.2 Legitimate interests (Art. 6(1)(f)): to operate, improve and secure the App, analyse usage, prevent abuse and communicate with you about the App.

4.3 Consent (Art. 6(1)(a)): for certain features, specific analytics and marketing.

4.4 Legal obligations (Art. 6(1)(c)): to comply with laws, regulations or lawful requests from relevant authorities.

4.5 Special category data (Art. 9): to enable features that process data related to human owner activity and health, pursuant to the Woofy Terms of Service, explicit user consent and performance of the contract.

5. How We Use Your Personal Data

• Provide and maintain services: to deliver the Woofy platform, create and manage user accounts, and enable features.
• Manage subscriptions and payments: to process your subscription plan payments and manage your account.
• Communicate with you: to respond to queries, send service-related emails or updates, security alerts and support messages; customise content and promotional communications based on your preferences.
• Security and compliance: to detect, prevent and manage errors, crashes, technical issues or illegal activities; comply with applicable regulations; prevent abuse, fraud and unauthorised access.
• Improve our services: to understand usage patterns and performance, analyse trends, track user behaviour and generate insights.

6. How We Share Personal Data

6.1 Service providers

Third party service providers that help us operate the App, who are contractually obliged to protect your data:

• Identity providers: Apple (Sign In with Apple); Google (Sign In with Google).
• AI model / provider: Anthropic Claude Haiku 4.5.
• Backend hosting: Railway.
• Media and photo storage: Cloudflare R2.
• Push notifications: Firebase Cloud Messaging (Google); Apple Push Notification service.

We do not sell your personal information to third parties, share personal identifiable information without your consent, or use your details for unsolicited purposes.

6.2 AI model provider

When you interact with Woofy, your queries or prompts may be sent to our AI provider with no personal identifiers included. Our AI provider processes user-submitted content for behaviour tag extraction and to deliver the match scoring feature. We do not use your personal data or queries to train AI models.

6.3 Business users and transfers

Business users on the Woofy app can see only the profile data that consumer users choose to share with them. In the event of a merger, acquisition, restructuring or sale, personal data may be transferred as part of the transaction, subject to appropriate safeguards. We do not sell any personal data to business users or third parties.

6.4 Legal and regulatory authorities

We may disclose personal data where necessary to comply with a legal obligation; respond to lawful requests from courts, regulators or law enforcement; or protect our rights, property or safety.

7. International Transfers

We may transfer personal data outside the UK or European Economic Area (EEA), for example where our internal team and third party service providers are located in other countries including Turkey, the United States and European Union. Where we engage in any international data transfer, we will ensure that appropriate safeguards are in place, relying on the UK International Data Transfer Agreement (IDTA) standards or the UK Addendum to EU Standard Contractual Clauses.

8. Cybersecurity Policy

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage, including encryption in transit and at rest, access controls, authentication and key management, regular monitoring and logging, and internal impact risk assessments.

In the event of a personal data breach, we will follow a structured response process including detection and containment, assessment, notification to the Information Commissioner's Office (ICO) within 72 hours where required under UK GDPR Art. 33, notification to affected users under Art. 34 where applicable, record-keeping and post-incident review.

If you believe your personal data has been compromised, please contact us immediately at hello@getwoofy.app.

9. Children

Woofy is not intended for use by children under 18, and we do not knowingly collect personal data from children under 18. If you believe that we have collected personal data from a child, please contact us at hello@getwoofy.app and we will take appropriate steps to delete it.

10. Data Retention Policy

• Account data: lifetime of the account, with a 90-day soft-delete recovery window; certain data retained up to 7 years as required by law.
• Playdate ratings: anonymised indefinitely after user deletion.
• Messaging data: 36 months.
• Application logs: 12 months.
• Moderation records: 6 years, aligned to UK Limitation Act 1980.
• Financial records and transaction data: at least 7 years under statutory guidelines.
• Usage data: typically 12–24 months; anonymised analytics retained indefinitely.

11. Cookies Policy

We use cookies and similar tracking technologies to keep you signed in, remember your preferences, understand how you use the Woofy platform, and improve our service. You can control your cookie consent preferences through your in-app or browser settings. Disabling essential cookies may affect certain features.

12. Marketing Communications

If you opt in to receive marketing emails from us, we may send you information about new features, offers or updates. You can opt out at any time by using the unsubscribe link in the email or by contacting us at hello@getwoofy.app.

13. Your Privacy Rights

Depending on your location and subject to certain conditions, you may have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request restriction of processing in certain circumstances.
• Right to data portability: to request a copy of your data in a structured, commonly-used and machine-readable format.
• Right to object: to object to certain types of processing, including direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us directly at hello@getwoofy.app. We aim to acknowledge requests within 7 working days and respond within 30 days.

Account Deletion: You may request deletion of your account at any time via Settings > Account > Delete Account, or by emailing hello@getwoofy.app with "Account Deletion Request" in the subject line.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or the relevant supervisory authority in your jurisdiction.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and notify you via the App or by email. For any significant or material changes, we will provide more prominent notice at least 30 days before the updated policy takes effect.

15. Accessibility

We are committed to making Woofy accessible to as many people as possible, including support for screen readers, display text scaling and high contrast settings. If you experience any difficulty accessing the App due to a disability or accessibility need, please contact us at hello@getwoofy.app.

16. Contact Us

If you have any further questions about this Privacy Policy or how we handle your personal data, please contact us directly at hello@getwoofy.app.